Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's operational capabilities.